merlinswap-6ib[.]pages[.]dev

PhishDestroy identifies merlinswap-6ib.pages.dev as an elevated-risk crypto drainer phishing domain currently active in the wild. This domain is engineered to deceive users into connecting crypto wallets and signing malicious transactions that drain assets directly.
This domain was flagged by ScamSniffer and Enkrypt, and VirusTotal confirms detection by 1 out of 95 security vendors. The infrastructure resolves to IP 188.114.97.3 and is currently listed on 2 public blocklists. It leverages a Google Trust Services SSL certificate and is registered through Cloudflare, Inc., indicating a preference for trusted hosting and TLS encryption to appear legitimate. Despite these superficial trust signals, the domain’s purpose—facilitating unauthorized cryptocurrency transfers—remains clear.
Users should avoid visiting or interacting with merlinswap-6ib.pages.dev entirely. If you’ve already connected your wallet or signed a transaction, revoke any suspicious smart contract approvals immediately using tools like Revoke.cash or Etherscan. Report the domain to PhishDestroy for further analysis and block it at the network level. Always verify URLs via official channels before engaging with any crypto platform.